Vulnerability Search Top

You can search for vulnerabilities managed by JVN (Japan Vulnerability Note) and NVD (National Vulnerability Database).
Search keywords must be entered in English otherwise will not be searched in both JVN and NVD.

To search by CWE, please refer to the CWE Overview and check the CWE number.

Urgent
Important
Warning
Low

JVN Vulnerability Information

Update Date":July 1, 2026, 2:01 p.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Impact Show	Exploit PoC Search
250771	7.5	危険	FrontAccounting	-	FrontAccounting の config.php における PHP リモートファイルインクルージョンの脆弱性	-	CVE-2007-4279	2012-06-26 15:54	2007-08-9	Show	GitHub Exploit DB Packet Storm

250772	7.5	危険	Esri	-	ESRI ArcSDE サービスの giomgr プロセスにおけるスタックベースのバッファオーバーフローの脆弱性	CWE-119 バッファエラー	CVE-2007-4278	2012-06-26 15:54	2007-08-15	Show	GitHub Exploit DB Packet Storm

250773	7.5	危険	ez photo sales	-	EZPhotoSales におけるパスワードをダウンロードされる脆弱性	CWE-255 証明書・パスワード管理	CVE-2007-4261	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

250774	5	警告	ez photo sales	-	EZPhotoSales における任意のギャラリーへアクセスされる脆弱性	-	CVE-2007-4260	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

250775	5	警告	ez photo sales	-	EZPhoteSales における任意のイメージファイルをダウンロードされる脆弱性	-	CVE-2007-4259	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

250776	7.5	危険	envolution	-	Envolution の News モジュールにおける SQL インジェクションの脆弱性	-	CVE-2007-4253	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

250777	4.3	警告	chilkat software	-	CkString.dll および CHILKAT ASP String の特定の ActiveX コントロールにおける絶対パストラバーサルの脆弱性	-	CVE-2007-4252	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

250778	5	警告	advanced searchbar	-	Advanced Searchbar の isChecked 関数におけるサービス運用妨害 (DoS) の脆弱性	CWE-noinfo 情報不足	CVE-2007-4250	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

250779	4.3	警告	exportnation	-	Internet Explorer の ExportNation toolbar におけるサービス運用妨害 (DoS) の脆弱性	-	CVE-2007-4249	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

250780	4.3	警告	dimema	-	CDM の Search.php におけるクロスサイトスクリプティングの脆弱性	CWE-79 クロスサイト・スクリプティング（XSS）	CVE-2007-4245	2012-06-26 15:54	2007-08-8	Show	GitHub Exploit DB Packet Storm

NVD Vulnerability Information

Update Date:July 1, 2026, 4:27 a.m.

No	CVSS	Level Attach Vector	Vendor Name	Project Name	Title	CWE	CVE	Update Date	Publication Date	Show Affected	Exploit PoC Search
280941	6.1	MEDIUM Network	atutor	atutor	Cross-site scripting (XSS) vulnerability in popuphelp.php in ATutor 2.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the h parameter.	CWE-79 Cross-site Scripting	CVE-2015-7711	2024-11-21 11:37	2017-09-1	Show	GitHub Exploit DB Packet Storm

280942	9.8	CRITICAL Network	pngcrush_project	pngcrush	Double-free vulnerability in the sPLT chunk structure and png.c in pngcrush before 1.7.87 allows attackers to have unspecified impact via unknown vectors.	CWE-415 Double Free	CVE-2015-7700	2024-11-21 11:37	2017-09-1	Show	GitHub Exploit DB Packet Storm

280943	6.5	MEDIUM Network	samsung	samsung_mobile	LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7896	2024-11-21 11:37	2017-08-25	Show	GitHub Exploit DB Packet Storm

280944	7.5	HIGH Network	spi-inc	ganeti	The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.…	CWE-200 Information Exposure	CVE-2015-7945	2024-11-21 11:37	2017-08-19	Show	GitHub Exploit DB Packet Storm

280945	7.5	HIGH Network	spi-inc	ganeti	The RESTful control interface (aka RAPI or ganeti-rapi) in Ganeti before 2.9.7, 2.10.x before 2.10.8, 2.11.x before 2.11.8, 2.12.x before 2.12.6, 2.13.x before 2.13.3, 2.14.x before 2.14.2, and 2.15.…	CWE-399 Resource Management Errors	CVE-2015-7944	2024-11-21 11:37	2017-08-19	Show	GitHub Exploit DB Packet Storm

280946	8.8	HIGH Network	samsung	galaxy_s6_edge_firmware	The DCMProvider service in Samsung LibQjpeg on a Samsung SM-G925V device running build number LRX22G.G925VVRU1AOE2 allows remote attackers to cause a denial of service (segmentation fault and process…	CWE-119 Incorrect Access of Indexable Resource ('Range Error')	CVE-2015-7894	2024-11-21 11:37	2017-08-10	Show	GitHub Exploit DB Packet Storm

280947	7.5	HIGH Network	netflix	lemur	Lemur 0.1.4 does not use sufficient entropy in its IV when encrypting AES in CBC mode.	CWE-331 Insufficient Entropy	CVE-2015-7764	2024-11-21 11:37	2017-08-10	Show	GitHub Exploit DB Packet Storm

280948	9.8	CRITICAL Network	ntp debian netapp	ntp debian_linux oncommand_balance clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager	Crypto-NAK packets in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to bypass authentication.	CWE-287 Improper Authentication	CVE-2015-7871	2024-11-21 11:37	2017-08-8	Show	GitHub Exploit DB Packet Storm

280949	6.5	MEDIUM Network	ntp debian netapp siemens	ntp debian_linux oncommand_balance clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager tim_4r-ie_firmware tim_4r-ie_dnp3_firmware	The decodenetnum function in ntpd in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote attackers to cause a denial of service (assertion failure) via a 6 or mode 7 packet containing a l…	CWE-20 Improper Input Validation	CVE-2015-7855	2024-11-21 11:37	2017-08-8	Show	GitHub Exploit DB Packet Storm

280950	8.8	HIGH Network	ntp netapp	ntp oncommand_balance clustered_data_ontap data_ontap oncommand_unified_manager oncommand_performance_manager	Buffer overflow in the password management functionality in NTP 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77 allows remote authenticated users to cause a denial of service (daemon crash) or possibly…	CWE-120 Classic Buffer Overflow	CVE-2015-7854	2024-11-21 11:37	2017-08-8	Show	GitHub Exploit DB Packet Storm

Vendor Name
プロダクト・サービス名
Title
CVE
Urgent
Important
Warning
Warning
CWE
公開-検索開始年
公開-検索開始月
公開-検索開始日
公開-検索終了年
公開-検索終了月
公開-検索終了日
レベルソート
In descending order of publication date
In descending order of update date
Number of items displayed